You can't always fix it

A developer describes discovering serious data leaks in prescription medication courier tracking pages — exposing customer addresses, signatures, porch photos, and even a Stripe private key. Despite multiple attempts at responsible disclosure through direct contact, pharmacy staff, and prescribers, the vulnerabilities remain unfixed due to inaccessible security contacts and unresponsive companies. The key takeaway: sometimes security issues cannot be fixed by the person who finds them, and accepting that limit is necessary after exhausting reasonable reporting options.